../tests/rules.yara